[lwip-devel] [patch #7840] Segfault in dhcp_parse_reply if no end marker in dhcp packet

[Henrik Persson]

URL:
  <http://savannah.nongnu.org/patch/?7840>

                 Summary: Segfault in dhcp_parse_reply if no end marker in
dhcp packet
                 Project: lwIP - A Lightweight TCP/IP stack
            Submitted by: hnrkp
            Submitted on: Thu 30 Aug 2012 12:03:51 PM GMT
                Category: None
                Priority: 7 - High
                  Status: None
                 Privacy: Public
             Assigned to: None
        Originator Email: 
             Open/Closed: Open
         Discussion Lock: Any
         Planned Release: None

    _______________________________________________________

Details:

If no endmarker is present in a dhcp reply a null pointer is potentially
dereferenced.

Add fix and test case as proof of concept.

This also exists in 1.4 and should be patched before release of 1.4.1.
Confirmed to exist in the field with certain cisco routers.



    _______________________________________________________

File Attachments:


-------------------------------------------------------
Date: Thu 30 Aug 2012 12:03:51 PM GMT  Name:
0001-Segfault-in-dhcp_parse_reply-if-no-end-marker.patch  Size: 6kB   By:
hnrkp

<http://savannah.nongnu.org/patch/download.php?file_id=26450>

    _______________________________________________________

Reply to this item at:

  <http://savannah.nongnu.org/patch/?7840>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.nongnu.org/